From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id E78EDC433EF for ; Tue, 19 Oct 2021 12:27:01 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id C98F56137D for ; Tue, 19 Oct 2021 12:27:01 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S235571AbhJSM3N (ORCPT ); Tue, 19 Oct 2021 08:29:13 -0400 Received: from szxga02-in.huawei.com ([45.249.212.188]:24358 "EHLO szxga02-in.huawei.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S230267AbhJSM3L (ORCPT ); Tue, 19 Oct 2021 08:29:11 -0400 Received: from dggeme754-chm.china.huawei.com (unknown [172.30.72.56]) by szxga02-in.huawei.com (SkyGuard) with ESMTP id 4HYXtm2XD8zbd5C; Tue, 19 Oct 2021 20:22:24 +0800 (CST) Received: from huawei.com (10.175.127.227) by dggeme754-chm.china.huawei.com (10.3.19.100) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2308.15; Tue, 19 Oct 2021 20:26:56 +0800 From: Ye Bin To: , , CC: , , Ye Bin Subject: [PATCH -next v4 0/3] Fix some issues about mmp Date: Tue, 19 Oct 2021 20:39:28 +0800 Message-ID: <20211019123931.1545295-1-yebin10@huawei.com> X-Mailer: git-send-email 2.31.1 MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 8bit X-Originating-IP: [10.175.127.227] X-ClientProxiedBy: dggems703-chm.china.huawei.com (10.3.19.180) To dggeme754-chm.china.huawei.com (10.3.19.100) X-CFilter-Loop: Reflected Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org I test mmp function as follow steps: 1. Inject delay 5s in ext4_multi_mount_protect function after "skip:" label. 2. Share HostA block device(sda) with HostB(nbd0) by NBD. 3. Enable mmp feature when mkfs.ext4 sda. 4. Mount sda and nbd0 at the same time. I found kmmpd never trigger detect multi-mount. Reason is as follow: 1. Kmmpd init seq with 0, if two host have same nodename, will lead to detect confliction very slow, even never detect confliction. 2. When detect confliction in kmmpd, we get 'check_bh' is same with 'bh'. so we compare data with itself. 3. We only trigger detect when ”diff > mmp_check_interval * HZ“, 'mmp_check_interval' is double of 'mmp_update_interval', 'diff' is about 'mmp_update_interval'. So 'diff' is little than 'mmp_check_interval * HZ' normaly. As Jan Kara explain as follows: "I think the check is there only for the case where write_mmp_block() + sleep took longer than mmp_check_interval. I agree that should rarely happen but on a really busy system it is possible and in that case we would miss updating mmp block for too long and so another node could have started using the filesystem. " v1->v2: Fix 'last_check_time' not initialized before checking. v2->v3: 1. drop commit "ext4: introduce last_check_time record previous check time" As Ted explain as follows: "I'd like Andreas to comment here. My understanding is that MMP originally intended as a safety mechanism which would be used as part of a primary/backup high availability system, but not as the *primary* system where you might try to have two servers simultaneously try to mount the file system and use MMP as the "election" mechanism to decide which server is going to be the primary system, and which would be the backup system. The cost of being able to handle this particular race is it would slow down the mounts of cleanly unmounted systems. There *are* better systems to implement leader elections[1] than using MMP. Most of these more efficient leader elections assume that you have a working IP network, and so if you have a separate storage network (including a shared SCSI bus) from your standard IP network, then MMP is a useful failsafe in the face of a network partition of your IP network. The question is whether MMP should be useful for more than that. And if it isn't, then we should probably document what MMP is and isn't good for, and give advice in the form of an application note for how MMP should be used in the context of a larger system." 2. drop commit "ext4: fix possible store wrong check interval value in disk when umount" 3. simplify read_mmp_block fucntion to avoid UAF v3->v4: 1. drop commit "ext4: init 'seq' with the value which set in 'ext4_multi_mount_protect'" 2. merge "ext4: get buffer head before read_mmp_block" to "ext4: simplify read_mmp_block fucntion" 3. rename "ext4: avoid to re-read mmp check data get from page cache" to "ext4: remove useless bh_check variable" 4. reorder "ext4: remove useless bh_check variable" and "ext4: simplify read_mmp_block fucntion" Ye Bin (3): ext4: compare to local seq and nodename when check conflict ext4: remove useless bh_check variable ext4: simplify read_mmp_block fucntion fs/ext4/ext4.h | 5 +++- fs/ext4/mmp.c | 64 +++++++++++++++++++++----------------------------- 2 files changed, 31 insertions(+), 38 deletions(-) -- 2.31.1